docs(ops): add gitea dev bootstrap preflight [skip ci]

docs/LOGBOOK.md

@@ -1,3 +1,20 @@
+## 2026-06-24｜MOMO Pro / AwoooGo dev bootstrap preflight
+
+**背景**：延續 Codex 雙工作站 / Gitea dev 環境盤點，先挑最安全的兩個候選：MOMO Pro 與 AwoooGo。這兩個本機工作樹都是 clean，且本機 `main` commit 與 Gitea `main` 完全一致；但遠端 `dev` branch 尚未存在，所以本輪只建立 preflight snapshot，不建立 branch、不 clone workspace、不推產品 repo。
+
+**Readback**：
+- MOMO Pro：`/Users/ogt/momo-pro-system`，branch `main`，commit `76a89a70986b7428704a12ffbb7180f159db151f`，dirty `0`；Gitea `wooo/ewoooc` main 同 commit，`dev` missing。
+- AwoooGo：`/Users/ogt/Documents/AwoooGo`，branch `main`，commit `86c96a2845a52e7ccd2c61324215a3346a6c2f22`，dirty `0`；Gitea `wooo/AwoooGo` main 同 commit，`dev` missing。
+- 預期 Codex dev workspace `/Users/ogt/codex-workspaces/momo-pro-dev` 與 `/Users/ogt/codex-workspaces/awooogo-dev` 目前都不存在，避免誤判為已完成雙機 dev workspace。
+
+**新增文件**：
+- `docs/operations/codex-gitea-dev-bootstrap-preflight.snapshot.json`
+- `docs/operations/CODEX-WORKSTATION-GITEA-DEV-READBACK.md` 新增 §8 preflight table。
+
+**邊界**：
+- `remote_dev_branch_create=0`，`remote_write_performed=false`，`raw_git_sync_allowed=false`，`raw_conversation_sync_allowed=false`。
+- 下一步必須是明確 owner gate 後，才可從驗證過的 `main` commit 建 `dev` branch，再 clone 乾淨 `~/codex-workspaces/<product>-dev`。
+
 ## 2026-06-24｜Codex 雙工作站 / Gitea dev 環境只讀盤點
 
 **背景**：完成重啟恢復 readback 後，接續使用者排定的第 2 / 3 步：把 Mac Mini / MacBook Pro 的開發工作收攏到 Gitea dev workspace，讓外出時可用 MacBook Pro 開 Codex 繼續開發。這一段只做只讀盤點與文件化，不建立 remote branch、不推產品 repo、不複製 raw `.git`、不同步 raw Codex / ChatGPT conversations。

docs/operations/CODEX-WORKSTATION-GITEA-DEV-READBACK.md

@@ -1,6 +1,6 @@
 # Codex 雙工作站 / Gitea 開發環境 Readback
 
-> Last updated: 2026-06-24 11:45 Asia/Taipei
+> Last updated: 2026-06-24 11:52 Asia/Taipei
 > Scope: Mac Mini、MacBook Pro、Gitea dev workspace、全產品專案收攏。
 
 ---
@@ -88,3 +88,35 @@ Forbidden sync targets: auth.json, *.sqlite, sessions, raw conversations, .env,
 4. For 2026FIFA, build a narrow drift command that avoids full untracked scan.
 5. For VTuber, repair local repository HEAD / inventory before any Gitea action.
 6. Update Start Here / dashboard snapshots only after readback, not by assumption.
+
+## 8. 2026-06-24 11:52 dev bootstrap candidate preflight
+
+Machine-readable snapshot:
+
+```text
+docs/operations/codex-gitea-dev-bootstrap-preflight.snapshot.json
+```
+
+| Product | Local state | Remote state | Workspace | Preflight result |
+|---------|-------------|--------------|-----------|------------------|
+| MOMO Pro | `/Users/ogt/momo-pro-system`, `main`, `76a89a70986b`, dirty `0` | `wooo/ewoooc` main matches local; `dev` missing | `/Users/ogt/codex-workspaces/momo-pro-dev` missing | ready for owner-reviewed dev bootstrap |
+| AwoooGo | `/Users/ogt/Documents/AwoooGo`, `main`, `86c96a2845a5`, dirty `0` | `wooo/AwoooGo` main matches local; `dev` missing | `/Users/ogt/codex-workspaces/awooogo-dev` missing | ready for owner-reviewed dev bootstrap |
+
+Allowed next step after explicit owner gate:
+
+```text
+1. Create remote dev branch from the verified main commit.
+2. Clone a clean Codex workspace under ~/codex-workspaces/<product>-dev.
+3. Verify branch=dev, dirty=0, remote points to Gitea, and no .env / runtime volumes / raw .git copy were imported.
+4. Update Start Here / workstation dashboard from readback.
+```
+
+Still blocked:
+
+```text
+remote_dev_branch_create=0
+remote_write_performed=false
+raw_git_sync_allowed=false
+raw_conversation_sync_allowed=false
+env_or_runtime_volume_sync=false
+```

docs/operations/codex-gitea-dev-bootstrap-preflight.snapshot.json

@@ -0,0 +1,63 @@
+{
+  "schema_version": "codex_gitea_dev_bootstrap_preflight_v1",
+  "generated_at": "2026-06-24T11:52:00+08:00",
+  "summary": {
+    "candidate_count": 2,
+    "clean_candidate_count": 2,
+    "remote_dev_branch_created_count": 0,
+    "remote_write_performed": false,
+    "execution_authorized": false,
+    "raw_git_sync_allowed": false,
+    "raw_conversation_sync_allowed": false
+  },
+  "candidates": [
+    {
+      "product_id": "momo-pro",
+      "display_name": "MOMO Pro",
+      "local_path": "/Users/ogt/momo-pro-system",
+      "gitea_repo": "wooo/ewoooc",
+      "remote_url": "https://gitea.wooo.work/wooo/ewoooc.git",
+      "local_branch": "main",
+      "local_commit": "76a89a70986b7428704a12ffbb7180f159db151f",
+      "remote_main_commit": "76a89a70986b7428704a12ffbb7180f159db151f",
+      "local_dirty_count": 0,
+      "remote_main_present": true,
+      "remote_dev_present": false,
+      "codex_workspace_expected": "/Users/ogt/codex-workspaces/momo-pro-dev",
+      "codex_workspace_present": false,
+      "candidate_status": "ready_for_owner_reviewed_dev_bootstrap",
+      "blocked_actions": [
+        "remote_dev_branch_create",
+        "force_push",
+        "raw_git_copy",
+        "raw_conversation_copy",
+        "env_or_runtime_volume_sync"
+      ],
+      "next_gate": "owner confirms main commit as dev baseline and approves creating dev branch plus clean clone workspace"
+    },
+    {
+      "product_id": "awooogo",
+      "display_name": "AwoooGo",
+      "local_path": "/Users/ogt/Documents/AwoooGo",
+      "gitea_repo": "wooo/AwoooGo",
+      "remote_url": "http://192.168.0.110:3001/wooo/AwoooGo.git",
+      "local_branch": "main",
+      "local_commit": "86c96a2845a52e7ccd2c61324215a3346a6c2f22",
+      "remote_main_commit": "86c96a2845a52e7ccd2c61324215a3346a6c2f22",
+      "local_dirty_count": 0,
+      "remote_main_present": true,
+      "remote_dev_present": false,
+      "codex_workspace_expected": "/Users/ogt/codex-workspaces/awooogo-dev",
+      "codex_workspace_present": false,
+      "candidate_status": "ready_for_owner_reviewed_dev_bootstrap",
+      "blocked_actions": [
+        "remote_dev_branch_create",
+        "force_push",
+        "raw_git_copy",
+        "raw_conversation_copy",
+        "env_or_runtime_volume_sync"
+      ],
+      "next_gate": "owner confirms main commit as dev baseline and approves creating dev branch plus clean clone workspace"
+    }
+  ]
+}